www.northregionselpa.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ea:e9:93:0c:b8:89:f0:ad:36:0e:3f:dc:27:b4:23:99:21 was issued on by Let's Encrypt.

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.northregionselpa.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ea:e9:93:0c:b8:89:f0:ad:36:0e:3f:dc:27:b4:23:99:21
Serial Number (int): 341273405303446017961302805162365875886369
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 81:9a:79:fe:64:51:d1:70:18:fb:81:d5:98:5b:b2:96:93:3a:45:34
Fingerprint (sha256): e3:d2:15:68:1c:09:77:b2:9c:e7:5d:91:9b:c3:b8:e6:1a:d8:cc:1b:f7:b7:c6:83:71:09:33:b9:61:ea:3b:0d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.northregionselpa.org

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.northregionselpa.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.bcs.lskysd.ca
admin.bready.lskysd.ca
admin.calmecaacademy.com
admin.cando.lskysd.ca
admin.cathedralschoolny.org
admin.ckcs.lskysd.ca
admin.connaught.lskysd.ca
admin.cornelius.fgsdk12.org
admin.csd300.org
admin.dilley.fgsdk12.org
admin.echoshaw.fgsdk12.org
admin.fernhill.fgsdk12.org
admin.fghs.fgsdk12.org
admin.fgsdk12.org
admin.garvanzaelementary.org
admin.hafford.lskysd.ca
admin.hamlincharter.org
admin.harveyclarke.fgsdk12.org
admin.hces.lskysd.ca
admin.heritage.lskysd.ca
admin.highschool.mcasd.net
admin.husd4.org
admin.josephgale.fgsdk12.org
admin.kauffmanschool.org
admin.kaumanaelementary.org
admin.kcs.lskysd.ca
admin.lawrence.lskysd.ca
admin.leoville.lskysd.ca
admin.lskysd.ca
admin.luseland.lskysd.ca
admin.macklin.lskysd.ca
admin.maymont.lskysd.ca
admin.mcasd.net
admin.mccreery.mcasd.net
admin.mckitrick.lskysd.ca
admin.missionprep.org
admin.nams.fgsdk12.org
admin.oga.fgsdk12.org
admin.omardblaircharterschool.com
admin.phillyscholars.org
admin.rayne.mcasd.net
admin.ryderschool.org
admin.sendicaeducation.com
admin.siths.org
admin.tommcall.fgsdk12.org
calmecaacademy.com
cathedralschoolny.org
cornelius.fgsdk12.org
csd300.org
ddiny.org
dilley.fgsdk12.org
echoshaw.fgsdk12.org
fernhill.fgsdk12.org
fghs.fgsdk12.org
fgsdk12.org
garvanzaelementary.org
hamlincharter.org
harveyclarke.fgsdk12.org
highschool.mcasd.net
husd4.org
josephgale.fgsdk12.org
kauffmanschool.org
kaumanaelementary.org
mcasd.net
mccreery.mcasd.net
missionprep.org
nams.fgsdk12.org
northregionselpa.org
oga.fgsdk12.org
omardblaircharterschool.com
phillyscholars.org
rayne.mcasd.net
ryderschool.org
siths.org
tommcall.fgsdk12.org
web.sendicaeducation.com
www.calmecaacademy.com
www.cathedralschoolny.org
www.csd300.org
www.ddiny.org
www.fgsdk12.org
www.garvanzaelementary.org
www.hamlincharter.org
www.husd4.org
www.kauffmanschool.org
www.kaumanaelementary.org
www.mcasd.net
www.missionprep.org
www.northregionselpa.org
www.omardblaircharterschool.com
www.phillyscholars.org
www.ryderschool.org
www.siths.org
www.sunrisewaldorfschool.org

Other certificates including the domain name northregionselpa.org

(limited to 100 certificates)
northregionselpa.org
admin.mckitrick.lskysd.ca
admin.bcs.lskysd.ca
northregionselpa.org
admin.calmecaacademy.com
admin.bcs.lskysd.ca
lskysd.ca
pal.ldcsb.ca
northregionselpa.org
northregionselpa.org
www.northregionselpa.org
admin.bcs.lskysd.ca
admin.bcs.lskysd.ca

Certificate

The complete raw certificate details for www.northregionselpa.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 341273405303446017961302805162365875886369
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-05 02:00:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-04 02:00:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.northregionselpa.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bcs.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bready.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.calmecaacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cando.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cathedralschoolny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ckcs.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.connaught.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cornelius.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.csd300.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.dilley.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.echoshaw.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fernhill.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fghs.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.garvanzaelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hafford.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hamlincharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.harveyclarke.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hces.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.heritage.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.highschool.mcasd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.husd4.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.josephgale.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kauffmanschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kaumanaelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kcs.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lawrence.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.leoville.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.luseland.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.macklin.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.maymont.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mcasd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mccreery.mcasd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mckitrick.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.missionprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nams.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.oga.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.omardblaircharterschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.phillyscholars.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rayne.mcasd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ryderschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sendicaeducation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.siths.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.tommcall.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calmecaacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cathedralschoolny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cornelius.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csd300.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ddiny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dilley.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'echoshaw.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fernhill.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fghs.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garvanzaelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hamlincharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harveyclarke.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highschool.mcasd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'husd4.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'josephgale.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kauffmanschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaumanaelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcasd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mccreery.mcasd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'missionprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nams.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northregionselpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oga.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omardblaircharterschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phillyscholars.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rayne.mcasd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ryderschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siths.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tommcall.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.sendicaeducation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.calmecaacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cathedralschoolny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.csd300.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ddiny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.garvanzaelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hamlincharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.husd4.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kauffmanschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kaumanaelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcasd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.missionprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northregionselpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.omardblaircharterschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phillyscholars.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ryderschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.siths.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sunrisewaldorfschool.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016ed4006803000004030046304402204e4af25254c47ee7ebb3615b82c415790b77e9723992fe304a439455b1ecafab0220251fa17bf480241048cee7540b26f54f7e340fa1b521ec28d20e3bfd59f9294500760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ed40068340000040300473045022100c1635033b42e42a8836800301b29a81815743d13ff9a2d59952119a674ed4a65022064c0292f69d63d2e81caaa2c79d2558d2308b1ec374567609bf069d62bf8308d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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